ryz:1 Access to audio at 'https://cdn.death.ovh/568fd0a7-8b9b-4fca-8051-49024025290e.mp3' from origi

ryz:1 Access to audio at 'https://cdn.death.ovh/568fd0a7-8b9b-4fca-8051-49024025290e.mp3' from origin 'https://death.ovh' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Deleted UserOP•11/12/24, 4:41 PM

gettind ds again

Deleted UserOP•11/12/24, 4:43 PM

DDeleted User ryz:1 Access to audio at 'https://cdn.death.ovh/568fd0a7-8b9b-4fca-8051-49024025...

YZ•11/12/24, 4:45 PM

I got the same error. When I followed the instruction to debug with curl, I found the returned pre-signed url worked on my server but not my local machine. I'm still getting @Space 's help to debug

YZ•11/12/24, 4:45 PM

In curl, I got 401 error

Deleted UserOP•11/12/24, 4:45 PM

i think for me its the caching, it works on another browser

Deleted UserOP•11/12/24, 4:45 PM

like no cors issue

Deleted UserOP•11/12/24, 4:45 PM

but with my main browser it doers not work

Deleted UserOP•11/12/24, 4:46 PM

its weird

YZ•11/12/24, 4:49 PM

@Mr. Catchii

You're in a better situation than me. Do you request the pre-signed url from the server or browser end? I requested the url from the server end, and it doesn't work on my broswer end.

YYZ @Mr. Catchii💯 You're in a better situation than me. Do you request the pre-sign...

Deleted UserOP•11/12/24, 4:52 PM

uh browser end

Deleted UserOP•11/12/24, 4:52 PM

i just put the cdn file

Deleted UserOP•11/12/24, 4:52 PM

in frontend

Deleted UserOP•11/12/24, 4:52 PM

and it works

Deleted UserOP•11/12/24, 4:52 PM

idk

Noa•11/12/24, 5:03 PM

Hi! Can I use the S3 API to access a public bucket owned by someone else? The use case is that I want others to be able to get and list objects of my public bucket using the S3 API in python (boto3).

This answer suggests it's not possible but I wanted to check to be sure: https://community.cloudflare.com/t/get-public-bucket-url-using-boto3/470008

If this is the case, I can see two other options but they don't seem ideal to me:

I create an API key with read access that I distribute to everyone who will access the bucket
I use the requestsrequests to download files from r2.dev url. But then I can only download files that I know the filename of, I can't list the files. And the documentation says that rate limits apply.

Noa•11/12/24, 5:05 PM

That's great, but it adds complexity to distribute the api key so I'd prefer if there's another way

Noa•11/12/24, 5:19 PM

Thanks for the info, but I'm afraid custom domain is infeasible for my use case as well

kubectl•11/12/24, 7:47 PM

Heyyyo! Whats the general recommended way to protect against hotlinking? I.e. prevent another site loading the content from my r2 bucket? Lets assume they do not send a Referer Header.

Original message was deleted

kubectl•11/12/24, 7:59 PM

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy#integration_with_html
its very much possible sadly

MDN Web Docs

Referrer-Policy - HTTP | MDN

The HTTP Referrer-Policy response header controls how much referrer information (sent with the Referer header) should be included with requests.
Aside from the HTTP header, you can set this policy in HTML.

kubectl•11/12/24, 8:01 PM

and then what? Its like you said, ppl can spoof whatever i put in there

Deleted UserOP•11/12/24, 9:03 PM

yeah i going crazy with this r2 stuff

Deleted UserOP•11/12/24, 9:03 PM

the cors is killing me

Deleted UserOP•11/12/24, 9:04 PM

nothing works

Advany•11/13/24, 9:45 AM

I keep getting get: Unspecified error (0) when using r2 with workers. It happens randomly. Most of the times it works but fails a couple of times a day. I also created a ticket on 15 oct (month ago) with case id 01231975 but no response after the initial.

Original message was deleted

Advany•11/13/24, 9:49 AM

couple 10k a day orso

AAdvany couple 10k a day orso

Advany•11/13/24, 9:49 AM

worker itself is doing more, but the r2 binding using get is called like 10k times a day

Original message was deleted

Advany•11/13/24, 9:50 AM

no idea, don't log that... could that be an issue? is there a limit in req/s?

Original message was deleted

Advany•11/13/24, 9:50 AM

yeah, get requests!

Original message was deleted

Advany•11/13/24, 9:51 AM

I can only find https://developers.cloudflare.com/r2/platform/limits/ this. That seems like the public bucket is limited. Can't find anything on limits of the binding to get a object...

Cloudflare Docs

Limits | Cloudflare R2 docs

Managed public bucket access through an r2.dev subdomain is not intended for production usage and has a rate limit applied to it. If you exceed the rate limit, requests through your r2.dev subdomain will be temporarily throttled and you will receive a 429 Too Many Requests response. For production use cases, consider linking a custom domain to y...

Original message was deleted

Advany•11/13/24, 9:53 AM

yeah, will do that!

Original message was deleted

Advany•11/13/24, 10:43 AM

I found one key, that was being accessed like 420 times a minute. I am adding a 1 minuut cache to that to see if it solves the issue...

Original message was deleted

Advany•11/13/24, 10:54 AM

yeah, so that was peak. Not 420/m all day long. So seems like there are a couple of peaks. And during those peaks its failing. Maybe there is a limit per key per minute orso?

Original message was deleted

Advany•11/13/24, 12:21 PM

can reduce the load by a lot with caching I see. Ill try 1 minute cache first, and see if that smooths out the curve. Wierd error btw...

would expect 429 or something. Not Unspecified error (0)

DDeleted User yeah i going crazy with this r2 stuff

kubectl•11/13/24, 1:09 PM

for me that the same aswell, i have only my domain authorized, but there are no cors headers sent by r2 for some reason.

Kkubectl for me that the same aswell, i have only my domain authorized, but there are no ...

Deleted UserOP•11/13/24, 1:41 PM

did you add cors rules?

Deleted UserOP•11/13/24, 1:42 PM

ryz:1 Access to audio at 'https://cdn.death.ovh/568fd0a7-8b9b-4fca-8051-49024025290e.mp3' from origi

Similar Threads

Similar Threads

Similar Threads